Expert Insight: A Few Quick Tips Regarding Logical Access 

by Lorna Willard / June 7, 2023

Data security is often seen as a burden, not a business-driving tactic. However, in today’s world with the proliferation of IT, the internet, the cloud, and risk associated with these systems and data, properly securing your data is essential to the success of your organization. Logical access is a key factor to data security that could easily be neglected, leaving your organization vulnerable to the growing threats of today’s security…

Prioritize Information Security 

by Tori Thurmond / May 30, 2023

Often times, information security gets neglected in an organization because it's something that’s hard to understand and feels like a hassle to deal with. Other priorities like financial, marketing and operational risk can feel more manageable than trying to understand the details of your organization’s security.   However, if you’ve been following current events, you’ve probably noticed major data breaches and security events are becoming more frequent. Breaches are inevitable…

The Importance of Quality Testing 

by Tori Thurmond / May 30, 2023

What is quality testing and why is it so important during your audit? Many audits on the market test the bare minimum when it comes to compliance requirements for the different audit frameworks. While a regular audit may technically test what needs to be tested to check off a box, a quality audit makes sure that the controls in place are sufficient and consistently functioning the way they need to…

The Risks and Benefits of Automating Your Audit

by Hannah Grace Holladay / January 10, 2024

Audits are hard, and automation doesn't fix that. Automation can be a really helpful tool in making your audit more manageable, but it doesn't mean an entire quality audit can be completed through automation. You still need an expert to review and test your controls to determine that they are designed and operating effectively. Audit Director Kyle Pardue further explains these risks and benefits in the video below: https://player.vimeo.com/video/815379875?h=8ec038c7c7&badge=0&autopause=0&player_id=0&app_id=58479 Choose…

Notes from the Field: CIS Control 4 – Secure Configuration of Enterprise Assets and Software 

by Greg Halpin / May 31, 2023

Next up in our series on the Center for Internet Security (CIS) Controls auditor, Greg Halpin will dive into Control 04- Secure Configuration of Enterprise Assets and Software. As a reminder, the CIS Controls are 18 information security controls that all organizations and information security professionals should be familiar with and implement to protect their networks and data from attackers.   The CIS overview for Secure Configuration of Enterprise Assets and…